{"affected":[{"defaultStatus":"affected","product":"Endpoint Manager Mobile","source":"CNA: ivanti","vendor":"Ivanti","versions":[{"status":"unaffected","version":"12.11.0.0","versionType":"custom"},{"status":"unaffected","version":"12.10.0.1","versionType":"custom"},{"status":"unaffected","version":"12.9.0.3","versionType":"custom"}]}],"cveId":"CVE-2026-105426","cwes":["CWE-20"],"description":"Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.7,"severity":"medium","source":"CNA: ivanti","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","version":"3.1"}],"modifiedAt":1794331712954,"publishedAt":1794326064149,"references":[{"source":"CNA: ivanti","tags":[],"url":"https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs"}],"remediation":[],"revision":"3c5f986637e52a4a47996f71e303f50c946d546aa0ef1a0675dab2943b3b3d33","sources":[{"modifiedAt":1794331712954,"name":"CNA: ivanti","retrievedAt":1794334111567,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105426"}],"ssvc":{"assessedAt":1794328718339,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-105426","updatedAt":1794334111567}